CVE-2026-59984: Openexr B44 Scratch Buffer Truncationcve-2026-59984-openexr-b44-scratch-buffer-truncation
Scratch buffer size computed as a 64-bit integer is passed directly to internal_decode_alloc_buffer without checking for size_t integer truncation. On 32-bit systems (ILP32), this can result in an undersized buffer allocation and subsequent heap-based buffer overflow.
